Product photo metadata is the hidden data stored inside your product image files: where and when each photo was taken, which camera or phone took it, which software edited it, and sometimes who supplied it. Most e-commerce platforms do not promise to remove it, so anyone who downloads a product image may be able to read it. The safe approach is to strip metadata from every product image before upload, keeping only what you actually need.
What metadata hides in a typical product photo
An online store's image library comes from many places: phones in the stockroom, a studio camera, a freelance retoucher, supplier press kits, and more and more often AI image generators. Each source leaves different traces.
| Source of the image | Metadata it often contains | What it can reveal |
|---|---|---|
| Phone photo taken in your stockroom or home | GPSLatitude, GPSLongitude, DateTimeOriginal, Make, Model | The address of your warehouse or home, and when you work there |
| Studio camera | BodySerialNumber, LensSerialNumber, maker notes, sometimes Artist | Which camera shot the image, and the photographer's name |
| Retoucher or agency | XMP editing history, Software, original file names, Lightroom or Photoshop settings | Who worked on the file, which tools they used, and file names from their internal system |
| Supplier or manufacturer images | IPTC Creator, Copyright Notice, Credit Line, keywords, captions | The name of your manufacturer or wholesaler, sometimes their internal product codes |
| AI image generator | IPTC DigitalSourceType, C2PA Content Credentials | That the image is AI-generated and which tool made it |
Some of this is harmless. Some of it is exactly what you would not want a competitor, a reseller or a stranger to know. For a field-by-field breakdown, see what metadata a photo contains.
Why product photo metadata matters for an online store
Your location and your routine
Many small brands shoot products where they store them, which is often a home, a garage or a small unit. A phone with location enabled writes the GPS coordinates of that spot into every photo. If the image file reaches customers unchanged, so does the address. The same problem affects resellers, which is why we cover it separately for marketplace listing photos.
Your suppliers and your sourcing
Images supplied by a manufacturer often carry the manufacturer's name in the IPTC Creator or Copyright fields, plus captions or keywords written for their own catalog. If you resell under your own brand, or you prefer not to advertise where your stock comes from, those fields do the advertising for you. Anyone who opens the file in a metadata viewer can read them.
Your internal workflow
Edited files can keep XMP history: the names of the original files, the editing software and version, and sometimes the full Lightroom develop settings. This rarely causes harm on its own, but it is information about your business that nobody outside it needs.
Page weight
Every byte of metadata is downloaded by every visitor who loads the image. On a large product photo the share is usually small. On category pages with dozens of thumbnails, or on files carrying an embedded preview image and a long XMP history, it adds up. We go into the numbers in why you should strip metadata before uploading images to your website.
Does Shopify remove metadata from product images?
Shopify does not publish a clear statement on which metadata survives in the images it serves. Here is what can be verified at the time of writing (2026):
- Shopify accepts PNG, JPEG, WebP, HEIC, GIF and several other formats for product images, up to 20 MB and 5000 x 5000 pixels (25 megapixels), according to its product media help page.
- The same page says Shopify's image service picks the best format the shopper's browser supports and serves the image in that format. In other words, the file a shopper receives is usually generated by Shopify, not the exact file you uploaded.
- In 2026, merchants reported in Shopify's developer community that IPTC and XMP fields, including the AI label
DigitalSourceType, were missing from images served by the Shopify CDN. Shopify staff later wrote in the same thread that the issue "should be fixed now".
The takeaway is not "Shopify strips metadata" or "Shopify keeps metadata". Shopify's handling of metadata is something the platform changes, and it is not documented. If you do not want a field to be public, remove it before you upload. If you need a field to survive, such as an AI label, check a live image after every major change.
Does WooCommerce strip EXIF data?
WooCommerce stores product images in the WordPress Media Library, so it inherits WordPress behavior. That behavior is more predictable and less protective than many store owners expect:
- The original upload is kept as is. WordPress saves the file you upload to
wp-content/uploads/without removing its metadata. That file has a public URL. - Large images get a scaled copy. Since WordPress 5.3, images larger than 2560 pixels get a resized copy with
-scaledin the file name, which becomes the main image. The full-size original is still stored next to it. - Resized copies depend on the image library. WordPress generates the WooCommerce sizes (
woocommerce_thumbnail,woocommerce_single,woocommerce_gallery_thumbnail) plus the standard WordPress sizes. With the GD library, those copies lose their metadata. With Imagick, WordPress deliberately keeps the EXIF, IPTC, XMP and ICC profiles in resized copies, as shown in the source of its Imagick strip_meta method. The EXIF block includes GPS data.
So on a typical WooCommerce store, a phone photo uploaded with GPS data can be downloaded with its GPS data intact, either as the original file or as a resized copy. Our guide on whether WordPress removes EXIF data covers how to check which image library your host uses.
When you should keep some metadata
Stripping everything is the right default for most product photos, with three exceptions.
AI-generated product and lifestyle images
If you submit products to Google Merchant Center, Google requires you to preserve the metadata that marks an image as AI-generated, specifically the IPTC DigitalSourceType value trainedAlgorithmicMedia, for images used in the image link, additional image link and lifestyle image link attributes. Our tool removes IPTC, XMP and C2PA data, so do not run AI-generated images that go to Merchant Center through it, or add the tag back afterwards with a tool such as ExifTool. Our guide to AI images, C2PA and Content Credentials explains these labels.
Color profiles
Product photos are judged on color. Images edited in a wide-gamut space or shot on recent phones often carry a Display P3 or Adobe RGB profile. Remove it and colors can shift on screen. Our tool keeps the ICC color profile and the orientation flag for this reason.
Your own copyright
If you commission original photography and want your brand credited when images are copied, you may want to keep or add your own IPTC Creator and Copyright Notice. Do this deliberately, after removing everything else, rather than leaving whatever the camera and the retoucher wrote.
A metadata workflow for product photography
The fix is a fixed step in your pipeline, not a one-off cleanup. A workflow that works for small teams:
- Shoot. On phones used for product shots, turn off location for the camera app. This prevents new GPS data but does not clean photos already taken.
- Edit. Retouch and crop as usual. If your editing software has export metadata options, choose the most restrictive one.
- Export for the web. Export in JPEG or WebP at the size your theme displays, in sRGB unless you have a reason to use a wider gamut.
- Strip. Run the exported files through our free metadata remover, up to 10 images at a time, downloaded as one ZIP. The default "Keep same format" mode is lossless, so the pixels are not re-encoded. For catalogs with thousands of files, a command-line tool is faster. Our guide to removing metadata from multiple photos at once compares the options.
- Re-add what you need. AI labels for Merchant Center, or your own copyright, if you use them.
- Upload. Use the clean files only. Keep originals in your internal archive, not in the store.
- Spot-check. Open a product page, download the image from the live URL, and inspect it. On WooCommerce, also check the original file URL in the Media Library.
Supplier images deserve their own intake step. When a manufacturer sends a press kit, clean the files before they enter your shared drive. Otherwise the original files get reused for months, in ads, emails and marketplace listings, with the supplier's metadata still inside.
Removing metadata does not remove what is visible in the photo. A shipping label on a box, a window view, a reflection in a glossy product or a document on the desk can reveal more than any EXIF field. Check the frame before you shoot.
Checklist for e-commerce teams
- Turn off location on every phone used for product photos.
- Strip metadata from every image between export and upload, including supplier images.
- Keep the ICC color profile so product colors stay accurate.
- Keep or re-add
DigitalSourceTypeon AI-generated images used in Google Merchant Center. - On WooCommerce, remember that the original upload stays public at its own URL.
- On Shopify, do not rely on undocumented stripping. Test a live image.
- Re-check after theme changes, platform updates or a new image plugin.